Add sandboxlib to build and devel systems

sandboxlib is a runtime dependency of ybd.  While ybd is not currently a
part of Baserock I found it surprising I couldn't at least run ybd from git
using the build image from wiki.baserock.org.

Created a new stratum as I was unable to find a suitable home
amongst the existing strata.
Also moves linux-user-chroot into the new stratum.

Change-Id: If55c0ba4b9a48a0abc69ad5d39900c6c7807c72b

34 files changed, 82 insertions, 5 deletions

diff --git a/strata/sandboxing.morph b/strata/sandboxing.morph
new file mode 100644
index 00000000..64de36c3
--- /dev/null
+++ b/strata/sandboxing.morph
@@ -0,0 +1,18 @@
+name: sandboxing
+kind: stratum
+description: |
+  Libraries/tools for running programs/commands in a (partially) isolated
+  environment.
+build-depends:
+- morph: strata/python2-core.morph
+chunks:
+- name: sandboxlib
+  repo: upstream:sandboxlib
+  ref: ce30050daa10fa32801e8f798911b36aa82343a4
+  unpetrify-ref: master
+  build-system: python-distutils
+- name: linux-user-chroot
+  repo: upstream:linux-user-chroot
+  ref: 40e0b71d556414dfe150a74937f2c8a68d351d6d
+  unpetrify-ref: v2015.1
+  build-system: autotools
diff --git a/strata/tools.morph b/strata/tools.morph
index 0a71acee..45891bbb 100644
--- a/strata/tools.morph
+++ b/strata/tools.morph
@@ -14,11 +14,6 @@ chunks:
   repo: upstream:binutils-gdb
   ref: 129ee12d013f4a2f09fe40a33072e6e47e949890
   unpetrify-ref: gdb-7.8-branch
-- name: linux-user-chroot
-  repo: upstream:linux-user-chroot
-  ref: 40e0b71d556414dfe150a74937f2c8a68d351d6d
-  unpetrify-ref: v2015.1
-  build-system: autotools
 - name: lsof
   morph: strata/tools/lsof.morph
   repo: upstream:lsof
diff --git a/systems/build-system-armv5l-openbmc-aspeed.morph b/systems/build-system-armv5l-openbmc-aspeed.morph
index 0ceb975e..f9524161 100644
--- a/systems/build-system-armv5l-openbmc-aspeed.morph
+++ b/systems/build-system-armv5l-openbmc-aspeed.morph
@@ -35,6 +35,8 @@ strata:
   morph: strata/ostree-core.morph
 - name: mtd-utilities
   morph: strata/mtd-utilities.morph
+- name: sandboxing
+  morph: strata/sandboxing.morph
 configuration-extensions:
 - extensions/set-hostname
 - extensions/add-config-files
diff --git a/systems/build-system-armv7l-altera-socfpga-devkit.morph b/systems/build-system-armv7l-altera-socfpga-devkit.morph
index f1e89121..5d83cb6a 100644
--- a/systems/build-system-armv7l-altera-socfpga-devkit.morph
+++ b/systems/build-system-armv7l-altera-socfpga-devkit.morph
@@ -37,6 +37,8 @@ strata:
   morph: strata/libsoup-common.morph
 - name: ostree-core
   morph: strata/ostree-core.morph
+- name: sandboxing
+  morph: strata/sandboxing.morph
 configuration-extensions:
 - extensions/set-hostname
 - extensions/add-config-files
diff --git a/systems/build-system-armv7lhf-highbank.morph b/systems/build-system-armv7lhf-highbank.morph
index 737c2dc4..afb35fec 100644
--- a/systems/build-system-armv7lhf-highbank.morph
+++ b/systems/build-system-armv7lhf-highbank.morph
@@ -46,6 +46,8 @@ strata:
   morph: strata/ostree-core.morph
 - name: unionfs-fuse-group
   morph: strata/unionfs-fuse-group.morph
+- name: sandboxing
+  morph: strata/sandboxing.morph
 configuration-extensions:
 - extensions/set-hostname
 - extensions/add-config-files
diff --git a/systems/build-system-armv7lhf-jetson.morph b/systems/build-system-armv7lhf-jetson.morph
index ba8665e2..16c8a7d6 100644
--- a/systems/build-system-armv7lhf-jetson.morph
+++ b/systems/build-system-armv7lhf-jetson.morph
@@ -44,6 +44,8 @@ strata:
   morph: strata/glib-common.morph
 - name: ostree-core
   morph: strata/ostree-core.morph
+- name: sandboxing
+  morph: strata/sandboxing.morph
 configuration-extensions:
 - extensions/set-hostname
 - extensions/add-config-files
diff --git a/systems/build-system-armv7lhf-rootfs.morph b/systems/build-system-armv7lhf-rootfs.morph
index 0d331f4b..7a614c62 100644
--- a/systems/build-system-armv7lhf-rootfs.morph
+++ b/systems/build-system-armv7lhf-rootfs.morph
@@ -42,6 +42,8 @@ strata:
   morph: strata/glib-common.morph
 - name: ostree-core
   morph: strata/ostree-core.morph
+- name: sandboxing
+  morph: strata/sandboxing.morph
 configuration-extensions:
 - extensions/set-hostname
 - extensions/add-config-files
diff --git a/systems/build-system-armv8b64.morph b/systems/build-system-armv8b64.morph
index df24d98e..9d7a69f6 100644
--- a/systems/build-system-armv8b64.morph
+++ b/systems/build-system-armv8b64.morph
@@ -45,6 +45,8 @@ strata:
   morph: strata/openstack-clients.morph
 - name: devtools
   morph: strata/devtools.morph
+- name: sandboxing
+  morph: strata/sandboxing.morph
 configuration-extensions:
 - extensions/set-hostname
 - extensions/add-config-files
diff --git a/systems/build-system-armv8l64.morph b/systems/build-system-armv8l64.morph
index 83e6b3ed..d5c2a7e7 100644
--- a/systems/build-system-armv8l64.morph
+++ b/systems/build-system-armv8l64.morph
@@ -45,6 +45,8 @@ strata:
   morph: strata/glib-common.morph
 - name: ostree-core
   morph: strata/ostree-core.morph
+- name: sandboxing
+  morph: strata/sandboxing.morph
 configuration-extensions:
 - extensions/set-hostname
 - extensions/add-config-files
diff --git a/systems/build-system-ppc64.morph b/systems/build-system-ppc64.morph
index 20703ad7..fcedcdb0 100644
--- a/systems/build-system-ppc64.morph
+++ b/systems/build-system-ppc64.morph
@@ -44,6 +44,8 @@ strata:
   morph: strata/glib-common.morph
 - name: ostree-core
   morph: strata/ostree-core.morph
+- name: sandboxing
+  morph: strata/sandboxing.morph
 configuration-extensions:
 - extensions/set-hostname
 - extensions/add-config-files
diff --git a/systems/build-system-x86_32-chroot.morph b/systems/build-system-x86_32-chroot.morph
index 0edb4460..6421e5ec 100644
--- a/systems/build-system-x86_32-chroot.morph
+++ b/systems/build-system-x86_32-chroot.morph
@@ -44,6 +44,8 @@ strata:
   morph: strata/glib-common.morph
 - name: ostree-core
   morph: strata/ostree-core.morph
+- name: sandboxing
+  morph: strata/sandboxing.morph
 configuration-extensions:
 - extensions/set-hostname
 - extensions/add-config-files
diff --git a/systems/build-system-x86_32.morph b/systems/build-system-x86_32.morph
index 00645b58..14959d5d 100644
--- a/systems/build-system-x86_32.morph
+++ b/systems/build-system-x86_32.morph
@@ -44,6 +44,8 @@ strata:
   morph: strata/glib-common.morph
 - name: ostree-core
   morph: strata/ostree-core.morph
+- name: sandboxing
+  morph: strata/sandboxing.morph
 configuration-extensions:
 - extensions/set-hostname
 - extensions/add-config-files
diff --git a/systems/build-system-x86_64-chroot.morph b/systems/build-system-x86_64-chroot.morph
index 68ae7dac..55efdf3f 100644
--- a/systems/build-system-x86_64-chroot.morph
+++ b/systems/build-system-x86_64-chroot.morph
@@ -44,6 +44,8 @@ strata:
   morph: strata/glib-common.morph
 - name: ostree-core
   morph: strata/ostree-core.morph
+- name: sandboxing
+  morph: strata/sandboxing.morph
 configuration-extensions:
 - extensions/set-hostname
 - extensions/add-config-files
diff --git a/systems/build-system-x86_64.morph b/systems/build-system-x86_64.morph
index 6e6bb512..58f6f20d 100644
--- a/systems/build-system-x86_64.morph
+++ b/systems/build-system-x86_64.morph
@@ -44,6 +44,8 @@ strata:
   morph: strata/glib-common.morph
 - name: ostree-core
   morph: strata/ostree-core.morph
+- name: sandboxing
+  morph: strata/sandboxing.morph
 configuration-extensions:
 - extensions/set-hostname
 - extensions/add-config-files
diff --git a/systems/devel-system-armv7-chroot.morph b/systems/devel-system-armv7-chroot.morph
index 6812e622..b5310590 100644
--- a/systems/devel-system-armv7-chroot.morph
+++ b/systems/devel-system-armv7-chroot.morph
@@ -59,6 +59,8 @@ strata:
   morph: strata/perl-common.morph
 - name: CPAN-Mini-Inject
   morph: strata/CPAN-Mini-Inject.morph
+- name: sandboxing
+  morph: strata/sandboxing.morph
 configuration-extensions:
 - extensions/set-hostname
 - extensions/add-config-files
diff --git a/systems/devel-system-armv7-highbank.morph b/systems/devel-system-armv7-highbank.morph
index 22cac493..dd98ab71 100644
--- a/systems/devel-system-armv7-highbank.morph
+++ b/systems/devel-system-armv7-highbank.morph
@@ -62,6 +62,8 @@ strata:
   morph: strata/perl-common.morph
 - name: CPAN-Mini-Inject
   morph: strata/CPAN-Mini-Inject.morph
+- name: sandboxing
+  morph: strata/sandboxing.morph
 configuration-extensions:
 - extensions/set-hostname
 - extensions/add-config-files
diff --git a/systems/devel-system-armv7-versatile.morph b/systems/devel-system-armv7-versatile.morph
index 9a38f5ba..cb533696 100644
--- a/systems/devel-system-armv7-versatile.morph
+++ b/systems/devel-system-armv7-versatile.morph
@@ -60,6 +60,8 @@ strata:
   morph: strata/perl-common.morph
 - name: CPAN-Mini-Inject
   morph: strata/CPAN-Mini-Inject.morph
+- name: sandboxing
+  morph: strata/sandboxing.morph
 configuration-extensions:
 - extensions/set-hostname
 - extensions/add-config-files
diff --git a/systems/devel-system-armv7-wandboard.morph b/systems/devel-system-armv7-wandboard.morph
index c71a3319..c37b599d 100644
--- a/systems/devel-system-armv7-wandboard.morph
+++ b/systems/devel-system-armv7-wandboard.morph
@@ -60,6 +60,8 @@ strata:
   morph: strata/perl-common.morph
 - name: CPAN-Mini-Inject
   morph: strata/CPAN-Mini-Inject.morph
+- name: sandboxing
+  morph: strata/sandboxing.morph
 configuration-extensions:
 - extensions/set-hostname
 - extensions/add-config-files
diff --git a/systems/devel-system-armv7b-chroot.morph b/systems/devel-system-armv7b-chroot.morph
index b385161e..87579a97 100644
--- a/systems/devel-system-armv7b-chroot.morph
+++ b/systems/devel-system-armv7b-chroot.morph
@@ -51,6 +51,8 @@ strata:
   morph: strata/perl-common.morph
 - name: CPAN-Mini-Inject
   morph: strata/CPAN-Mini-Inject.morph
+- name: sandboxing
+  morph: strata/sandboxing.morph
 configuration-extensions:
 - extensions/set-hostname
 - extensions/add-config-files
diff --git a/systems/devel-system-armv7b-highbank.morph b/systems/devel-system-armv7b-highbank.morph
index 294ced01..a4f8664e 100644
--- a/systems/devel-system-armv7b-highbank.morph
+++ b/systems/devel-system-armv7b-highbank.morph
@@ -58,6 +58,8 @@ strata:
   morph: strata/perl-common.morph
 - name: CPAN-Mini-Inject
   morph: strata/CPAN-Mini-Inject.morph
+- name: sandboxing
+  morph: strata/sandboxing.morph
 configuration-extensions:
 - extensions/set-hostname
 - extensions/add-config-files
diff --git a/systems/devel-system-armv7l-altera-socfpga-devkit.morph b/systems/devel-system-armv7l-altera-socfpga-devkit.morph
index f73576bc..f4e74723 100644
--- a/systems/devel-system-armv7l-altera-socfpga-devkit.morph
+++ b/systems/devel-system-armv7l-altera-socfpga-devkit.morph
@@ -55,6 +55,8 @@ strata:
   morph: strata/perl-common.morph
 - name: CPAN-Mini-Inject
   morph: strata/CPAN-Mini-Inject.morph
+- name: sandboxing
+  morph: strata/sandboxing.morph
 configuration-extensions:
 - extensions/set-hostname
 - extensions/add-config-files
diff --git a/systems/devel-system-armv7lhf-chroot.morph b/systems/devel-system-armv7lhf-chroot.morph
index 3e42adba..90825ffe 100644
--- a/systems/devel-system-armv7lhf-chroot.morph
+++ b/systems/devel-system-armv7lhf-chroot.morph
@@ -59,6 +59,8 @@ strata:
   morph: strata/perl-common.morph
 - name: CPAN-Mini-Inject
   morph: strata/CPAN-Mini-Inject.morph
+- name: sandboxing
+  morph: strata/sandboxing.morph
 configuration-extensions:
 - extensions/set-hostname
 - extensions/add-config-files
diff --git a/systems/devel-system-armv7lhf-highbank.morph b/systems/devel-system-armv7lhf-highbank.morph
index 21b31da7..0bbe9acd 100644
--- a/systems/devel-system-armv7lhf-highbank.morph
+++ b/systems/devel-system-armv7lhf-highbank.morph
@@ -65,6 +65,8 @@ strata:
   morph: strata/perl-common.morph
 - name: CPAN-Mini-Inject
   morph: strata/CPAN-Mini-Inject.morph
+- name: sandboxing
+  morph: strata/sandboxing.morph
 configuration-extensions:
 - extensions/set-hostname
 - extensions/add-config-files
diff --git a/systems/devel-system-armv7lhf-jetson.morph b/systems/devel-system-armv7lhf-jetson.morph
index 9d343db4..3f8ba53c 100644
--- a/systems/devel-system-armv7lhf-jetson.morph
+++ b/systems/devel-system-armv7lhf-jetson.morph
@@ -63,6 +63,8 @@ strata:
   morph: strata/perl-common.morph
 - name: CPAN-Mini-Inject
   morph: strata/CPAN-Mini-Inject.morph
+- name: sandboxing
+  morph: strata/sandboxing.morph
 configuration-extensions:
 - extensions/set-hostname
 - extensions/add-config-files
diff --git a/systems/devel-system-armv7lhf-wandboard.morph b/systems/devel-system-armv7lhf-wandboard.morph
index e2482245..ae745525 100644
--- a/systems/devel-system-armv7lhf-wandboard.morph
+++ b/systems/devel-system-armv7lhf-wandboard.morph
@@ -63,6 +63,8 @@ strata:
   morph: strata/perl-common.morph
 - name: CPAN-Mini-Inject
   morph: strata/CPAN-Mini-Inject.morph
+- name: sandboxing
+  morph: strata/sandboxing.morph
 configuration-extensions:
 - extensions/set-hostname
 - extensions/add-config-files
diff --git a/systems/devel-system-armv8b64.morph b/systems/devel-system-armv8b64.morph
index 496da0bd..339ae230 100644
--- a/systems/devel-system-armv8b64.morph
+++ b/systems/devel-system-armv8b64.morph
@@ -62,6 +62,8 @@ strata:
   morph: strata/perl-common.morph
 - name: CPAN-Mini-Inject
   morph: strata/CPAN-Mini-Inject.morph
+- name: sandboxing
+  morph: strata/sandboxing.morph
 configuration-extensions:
 - extensions/set-hostname
 - extensions/add-config-files
diff --git a/systems/devel-system-armv8l64.morph b/systems/devel-system-armv8l64.morph
index fbfd8220..53b55569 100644
--- a/systems/devel-system-armv8l64.morph
+++ b/systems/devel-system-armv8l64.morph
@@ -62,6 +62,8 @@ strata:
   morph: strata/perl-common.morph
 - name: CPAN-Mini-Inject
   morph: strata/CPAN-Mini-Inject.morph
+- name: sandboxing
+  morph: strata/sandboxing.morph
 configuration-extensions:
 - extensions/set-hostname
 - extensions/add-config-files
diff --git a/systems/devel-system-ppc64-chroot.morph b/systems/devel-system-ppc64-chroot.morph
index 2fce60bf..5b6ad771 100644
--- a/systems/devel-system-ppc64-chroot.morph
+++ b/systems/devel-system-ppc64-chroot.morph
@@ -57,6 +57,8 @@ strata:
   morph: strata/perl-common.morph
 - name: CPAN-Mini-Inject
   morph: strata/CPAN-Mini-Inject.morph
+- name: sandboxing
+  morph: strata/sandboxing.morph
 configuration-extensions:
 - extensions/set-hostname
 - extensions/add-config-files
diff --git a/systems/devel-system-ppc64-generic.morph b/systems/devel-system-ppc64-generic.morph
index 1d89eb8a..f06d23f7 100644
--- a/systems/devel-system-ppc64-generic.morph
+++ b/systems/devel-system-ppc64-generic.morph
@@ -60,6 +60,8 @@ strata:
   morph: strata/perl-common.morph
 - name: CPAN-Mini-Inject
   morph: strata/CPAN-Mini-Inject.morph
+- name: sandboxing
+  morph: strata/sandboxing.morph
 configuration-extensions:
 - extensions/set-hostname
 - extensions/add-config-files
diff --git a/systems/devel-system-x86_32-chroot.morph b/systems/devel-system-x86_32-chroot.morph
index b28b1ca5..acbf9a2d 100644
--- a/systems/devel-system-x86_32-chroot.morph
+++ b/systems/devel-system-x86_32-chroot.morph
@@ -59,6 +59,8 @@ strata:
   morph: strata/perl-common.morph
 - name: CPAN-Mini-Inject
   morph: strata/CPAN-Mini-Inject.morph
+- name: sandboxing
+  morph: strata/sandboxing.morph
 configuration-extensions:
 - extensions/set-hostname
 - extensions/add-config-files
diff --git a/systems/devel-system-x86_32-generic.morph b/systems/devel-system-x86_32-generic.morph
index ba103e9d..fe376fcd 100644
--- a/systems/devel-system-x86_32-generic.morph
+++ b/systems/devel-system-x86_32-generic.morph
@@ -64,6 +64,8 @@ strata:
   morph: strata/perl-common.morph
 - name: CPAN-Mini-Inject
   morph: strata/CPAN-Mini-Inject.morph
+- name: sandboxing
+  morph: strata/sandboxing.morph
 configuration-extensions:
 - extensions/set-hostname
 - extensions/add-config-files
diff --git a/systems/devel-system-x86_64-chroot.morph b/systems/devel-system-x86_64-chroot.morph
index efadb210..47e3d123 100644
--- a/systems/devel-system-x86_64-chroot.morph
+++ b/systems/devel-system-x86_64-chroot.morph
@@ -61,6 +61,8 @@ strata:
   morph: strata/perl-common.morph
 - name: CPAN-Mini-Inject
   morph: strata/CPAN-Mini-Inject.morph
+- name: sandboxing
+  morph: strata/sandboxing.morph
 configuration-extensions:
 - extensions/set-hostname
 - extensions/add-config-files
diff --git a/systems/devel-system-x86_64-generic.morph b/systems/devel-system-x86_64-generic.morph
index 9cd0242a..91c416c6 100644
--- a/systems/devel-system-x86_64-generic.morph
+++ b/systems/devel-system-x86_64-generic.morph
@@ -68,6 +68,8 @@ strata:
   morph: strata/erlang.morph
 - name: elixir
   morph: strata/elixir.morph
+- name: sandboxing
+  morph: strata/sandboxing.morph
 configuration-extensions:
 - extensions/set-hostname
 - extensions/add-config-files
diff --git a/systems/devel-system-x86_64-vagrant.morph b/systems/devel-system-x86_64-vagrant.morph
index cf12e97e..fb1e7e9f 100644
--- a/systems/devel-system-x86_64-vagrant.morph
+++ b/systems/devel-system-x86_64-vagrant.morph
@@ -62,6 +62,8 @@ strata:
   morph: strata/perl-common.morph
 - name: CPAN-Mini-Inject
   morph: strata/CPAN-Mini-Inject.morph
+- name: sandboxing
+  morph: strata/sandboxing.morph
 configuration-extensions:
 - extensions/set-hostname
 - extensions/add-config-files